[syslog-ng] Re: Logging to program destinations has odd prefix?
John Caruso
jcsyslog at fastmail.fm
Thu Jul 13 00:27:21 CEST 2006
At Friday 11:14 AM 9/17/2004, Balazs Scheidler wrote:
>On Thu, 2004-09-16 at 19:36, Lars Kellogg-Stedman wrote:
>> Text logged to a program via the program() destination has a prefix of
the
>> form <nnn>, which I'm assuming is the encoding of the syslog level and
>> facility. Great! But I don't want it :).
>>
>> Is there any way to prevent this text from being logged? Sure, I can
write
>> a "wrapper" program to edit these messages before they reach the
intended
>> destination, but my template doesn't ask for this information, so I'm
not
>> sure it should be there.
>
>I think this was fixed in one of the recent versions.
I just ran into this bug while using syslog-ng 1.6.0rc1 with a program
destination on a Solaris system. After finding the above discussion from
2004 I upgraded to 1.6.11...but the bug is still there. Here are some
samples of lines handed off from syslog-ng to the external program:
<6>Jul 7 14:53:50 sys1 kernel: SysRq : Emergency Sync
<4>Jul 7 14:53:50 sys1 kernel: Emergency Sync complete
<6>Jul 7 14:53:51 sys2 kernel: SELinux: initialized (dev 0:15, type nfs),
uses genfs_contexts
I'm getting around this by editing out the prefix, but it would be good if
this were fixed in syslog-ng itself.
- John
More information about the syslog-ng
mailing list